Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Ip-based blocking of malware

Active Publication Date: 2012-05-10
CA TECH INC
View PDF12 Cites 61 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Benefits of technology

[0008]One aspect provides a computer-implemented method for blocking a download of malware. Embodiments of the method comprises receiving a hosting website data report, where the hosting website data report describes a domain name and an Internet Protocol (IP) address of a website hosting a file a client is attempting to download. The method determines whether the domain name of the website is on a list of trusted domains. The method determines whether the IP address of the website is on a list of IP addresses from which clients have downloaded malware. The method further generates file download control data indicating to block downloading of the file responsive to determining that the domain name of the website is not on the list trusted domains and that the IP address of the website is on the list of IP addresses from which clients have downloaded malware. The method reports the file download control data to the client. The client is adapted to use the file download control data to selectively block downloading of the file.
[0009]Another aspect provides a non-transitory computer-readable storage medium storing executable computer program instructions for blocking a download of malware. The computer-readable storage medium stores computer program instructions for receiving a hosting website data report, where the hosting website data report describes a domain name and an IP address of a website hosting a file a client is attempting to download. The computer-readable storage medium further comprises computer program instructions for determining whether the domain name of the website is on a list of trusted domains. The computer-readable storage medium further comprises computer program instructions for determining whether the IP address of the website is on a list of IP addresses from which clients have downloaded malware. The computer-readable storage medi

Problems solved by technology

However, malware attackers defeat these security measures by frequently changing the domains from which the malware is distributed.
Such frequent domain changing makes traditional domain-based blocking of malware downloads nearly impossible because legitimate security software vendors cannot keep up.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Ip-based blocking of malware
  • Ip-based blocking of malware
  • Ip-based blocking of malware

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0018]FIG. 1 is a high-level block diagram of a computing environment 100 for detecting and blocking malicious software (malware) downloads according to one embodiment. FIG. 1 illustrates a security server 130 and three clients 110 connected by a network 120. The illustrated environment 100 represents a typical computing environment where multiple clients 110 interact with the security server 130 to identify and remediate malware at the clients 110. Only three clients 110 are shown in FIG. 1 in order to simplify and clarify the description. Embodiments of the computing environment 100 can have many clients 110 and security servers 130 connected to the network 120.

[0019]The client 110 is used by a user to interact with the security server 130 and / or other entities on the network 120. In one embodiment, the client 110 is a personal computer (PC) such as a desktop or notebook computer. In other embodiments, the client 110 is a mobile telephone, personal digital assistant, or other elec...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

A security module on a client monitors file download activities at the client and reports hosting website data to a security server. A download analysis module at the security server receives a hosting website data report from the client, where the hosting website data report describes a domain name and an IP address of a website hosting a file the client is attempting to download. The download analysis module analyzes the domain name and IP address of the website to generate file download control data indicating whether to allow downloading of the file to the client. The download analysis module reports the file download control data to the security module of the client. The security module uses the file download control data to selectively block downloading of the file.

Description

BACKGROUND OF THE INVENTION[0001]1. Field of the Invention[0002]This invention pertains in general to computer security and in particular to the detection of malicious software downloads.[0003]2. Description of the Related Art[0004]There is a wide variety of malicious software (malware) that can attack modern computers. Malware threats include computer viruses, worms, Trojan horse programs, spyware, adware and crimeware. Modern malware is often designed to provide financial gain to the attacker. For example, malware can surreptitiously capture important information such as logins, passwords, bank account identifiers, and credit card numbers. Similarly, malware can provide hidden interfaces that allow the attacker to access and control the compromised computer.[0005]Attackers often camouflage malware by making the malware appear to be legitimate. For example, malware attackers offer fake antivirus software applications at their websites. Unsuspecting users are tricked into downloadin...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): G06F21/00
CPCG06F21/562G06F21/51
Inventor NACHENBERG, CAREY S.
Owner CA TECH INC
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products